User Private Groups and ACLs

2002-04-15 Thread Ian Cumming
Hi, I'm running Debian Woody with the XFS filesystems. As such, I have access to ACLs (a _much_ better way of managing file permissions than standard unix file permissions, imho) With this in mind, the need for a User-Private-Group scheme is obsoleted, as the same can be achieved through the us

corrupted Packages files for testing

2002-04-15 Thread Olaf Meeuwissen
Dear .debs, As of yesterday, I see the following during my daily apt-get upgrade # /usr/bin/apt-get update Get:1 http://ftp.debian.org testng/main Packages [1745kB] [...] gzip: stdin: invalid compressed data--crc error gzip: stdin: invalid compressed data--length error Err http://f

corrupted Packages files for testing

2002-04-15 Thread Olaf Meeuwissen
Dear .debs, As of yesterday, I see the following during my daily apt-get upgrade # /usr/bin/apt-get update Get:1 http://ftp.debian.org testng/main Packages [1745kB] [...] gzip: stdin: invalid compressed data--crc error gzip: stdin: invalid compressed data--length error Err http://

Re: Iptables config - new

2002-04-15 Thread Peter Cordes
On Mon, Apr 15, 2002 at 07:58:00PM +0200, Mathias Palm wrote: > ... > Looking at all these, people might say more about smtp-packages going > astry s/package/packet/g -- #define X(x,y) x##y Peter Cordes ; e-mail: X([EMAIL PROTECTED] , ns.ca) "The gods confound the man who first found out how

Re: Iptables config - new

2002-04-15 Thread Peter Cordes
On Mon, Apr 15, 2002 at 07:58:00PM +0200, Mathias Palm wrote: > ... > Looking at all these, people might say more about smtp-packages going > astry s/package/packet/g -- #define X(x,y) x##y Peter Cordes ; e-mail: X([EMAIL PROTECTED] , ns.ca) "The gods confound the man who first found out how

Re: Iptables config

2002-04-15 Thread Mathias Palm
I'd say it might very well work correctly, but the table nat is not made for package filtering but for address translation (nat--network address translation) which is used for masquerading and portforwarding. If you only want a filtering firewall you might very well save yourself the effort to comp

Re: Iptables config - new

2002-04-15 Thread Mathias Palm
As mentioned in some other mail, always use iptables -F IMPUT first to avoid piling up rules like in your case. You defined three rules and there shouldn't be more (its not a windows maschine after all). A couple more questions. What is your net set up: Are 192.168.2.2 and xxx.yyy.zzz.com (the ip

Re: mod_php bug?

2002-04-15 Thread SDiZ \(UHome\)
> Hi! > > I found something interesting in mod_php. > > So, finally it uses User directive or not? Globally is User www-data. The answer is no. I think this should be a FAQ. Because mod_php is loaded as an shared object in httpd process, it would run as www-data. The solutation is use "perchild"

Re: Key servers

2002-04-15 Thread Jonathan McDowell
[Please respect my Mail-Followup-To header; I read the list] On Mon, Apr 15, 2002 at 03:37:50PM +0200, Janusz A. Urbanowicz wrote: > Jonathan McDowell wrote/napisa³[a]/schrieb: > -- Start of PGP signed section. > > On Sun, Apr 14, 2002 at 07:12:09PM +0200, Michal Tarana wrote: > > > > > I made m

Re: Iptables config

2002-04-15 Thread Mathias Palm
I'd say it might very well work correctly, but the table nat is not made for package filtering but for address translation (nat--network address translation) which is used for masquerading and portforwarding. If you only want a filtering firewall you might very well save yourself the effort to com

Re: Iptables config - new

2002-04-15 Thread Mathias Palm
As mentioned in some other mail, always use iptables -F IMPUT first to avoid piling up rules like in your case. You defined three rules and there shouldn't be more (its not a windows maschine after all). A couple more questions. What is your net set up: Are 192.168.2.2 and xxx.yyy.zzz.com (the ip

Re: mod_php bug?

2002-04-15 Thread SDiZ \(UHome\)
> Hi! > > I found something interesting in mod_php. > > So, finally it uses User directive or not? Globally is User www-data. The answer is no. I think this should be a FAQ. Because mod_php is loaded as an shared object in httpd process, it would run as www-data. The solutation is use "perchild

mod_php bug?

2002-04-15 Thread Michal Novotny
Hi! I found something interesting in mod_php. When you use safe_mod on and User user1 and Group group1 in the VirtualHost definition, then this you get: 1. running script test.php (made dir Test and file Test.log inside, log something to it) 2. running script test.php (dir and file alr

Re: Key servers

2002-04-15 Thread Jonathan McDowell
[Please respect my Mail-Followup-To header; I read the list] On Mon, Apr 15, 2002 at 03:37:50PM +0200, Janusz A. Urbanowicz wrote: > Jonathan McDowell wrote/napisa³[a]/schrieb: > -- Start of PGP signed section. > > On Sun, Apr 14, 2002 at 07:12:09PM +0200, Michal Tarana wrote: > > > > > I made

Re: Key servers

2002-04-15 Thread Janusz A . Urbanowicz
Jonathan McDowell wrote/napisał[a]/schrieb: -- Start of PGP signed section. > On Sun, Apr 14, 2002 at 07:12:09PM +0200, Michal Tarana wrote: > > > I made my gpg signature with gpg tool in Woody and everything was O.K. > > until I wanted to send it to some keyserver. I tried few servers from > > w

mod_php bug?

2002-04-15 Thread Michal Novotny
Hi! I found something interesting in mod_php. When you use safe_mod on and User user1 and Group group1 in the VirtualHost definition, then this you get: 1. running script test.php (made dir Test and file Test.log inside, log something to it) 2. running script test.php (dir and file al

Re: Key servers

2002-04-15 Thread Janusz A . Urbanowicz
Jonathan McDowell wrote/napisał[a]/schrieb: -- Start of PGP signed section. > On Sun, Apr 14, 2002 at 07:12:09PM +0200, Michal Tarana wrote: > > > I made my gpg signature with gpg tool in Woody and everything was O.K. > > until I wanted to send it to some keyserver. I tried few servers from > >

RE: Iptables config

2002-04-15 Thread VERBEEK, Francois
Simple and easy does the trick when working with such scripts. it's the result of an iptables-save # Generated by iptables-save v1.2.5 on Mon Apr 8 18:10:23 2002 *filter # #DEFAULT POLICIES # :INPUT DROP :FORWARD DROP :OUTPUT DROP # # INPUT and OUTPUT chains are only used when packets are go

RE: Iptables config

2002-04-15 Thread VERBEEK, Francois
Simple and easy does the trick when working with such scripts. it's the result of an iptables-save # Generated by iptables-save v1.2.5 on Mon Apr 8 18:10:23 2002 *filter # #DEFAULT POLICIES # :INPUT DROP :FORWARD DROP :OUTPUT DROP # # INPUT and OUTPUT chains are only used when packets are g